Sonatype launches customer-focused program, Sonatype innovate
2 minute read time
Say hello to Sonatype Innovate—a program designed for innovators within the Sonatype community to collaborate, grow and learn from each other.
Read More...
Open source attacks on the rise: Top 8 malicious packages found in npm
10 minute read time
We're rounding up the top 8 malicious cyber attacks on npm that Sonatype has discovered with its next-gen open source security and malware detection tool.
Read More...
Are you still wondering about dependency confusion attacks?
4 minute read time
Despite positive legislation and standards, open source software supply chains remain vulnerable to Dependency Confusion attacks by impersonating legitimate.
Read More...
Slaying the dragon of OSS legal compliance With the Advanced Legal Pack
3 minute read time
Open source can come with a plethora of legal obligations. Manual reviews can take hundreds of hours for 1 app. Let The Advanced Legal Packs help.
Read More...
Sonatype + Muse: How improved code quality complements enterprise SAST
3 minute read time
MuseDev, Sonatype's innovative code analysis platform, is highly complementary to enterprise SAST tools like Fortify that surface a wide breadth of deep.
Read More...
Onboarding Sonatype Lifecycle through source control (SCM)
3 minute read time
We're simplifying the Sonatype Lifecycle onboarding process, making it easy to quickly onboard apps from a source control repository such as GitHub, GitLab,.
Read More...
Update to CVE-2019-7238 in Nexus Repository Manager 3
1 minute read time
An article was brought to our attention that suggests a new attack tactic is targeting an old vulnerability in NXRM, CVE-2019-7238.
Read More...
Secure what you build and where you run it: Say hello to the infrastructure as code pack for Sonatype Lifecycle
4 minute read time
Introducing the Infrastructure as Code Pack for Nexus Lifecycle.
Read More...
Understanding Sonatype Container: Five technologies you need for full life cycle container security
3 minute read time
Say hello to Nexus Container and explore the five technologies you need for full life cycle container security.
Read More...